초록 ▼

A system and method for limiting access to and preventing unauthorized use of an owner's digital content stored in an information network and available to clients under authorized conditions. The network includes at least one server coupled to a storage device for storing the limited access digital

A system and method for limiting access to and preventing unauthorized use of an owner's digital content stored in an information network and available to clients under authorized conditions. The network includes at least one server coupled to a storage device for storing the limited access digital content encrypted using a random-generated key, known as a Document Encryption Key (DEK). The DEK is further encrypted with the server's public key, using a public/private key pair algorithm and placed in a digital container stored in a storage device and including as a part of the meta-information which is in the container. The client's workstation is coupled to the server for acquiring the limited access digital content under the authorized condition. A Trusted Information Handler (TIH) is validated by the server after the handler provides a data signature and type of signing algorithm to transaction data descriptive of the purchase agreement between the client and the owner. After the handler has authenticated, the server decrypts the encrypted DEK with its private key and re-encrypts the DEK with the handler's public key ensuring that only the information handler can process the information. The encrypted DEK is further encrypted with the client's public key personalizing the digital content to the client. The client's program decrypts the DEK with his private key and passes it along with the encrypted content to the handler which decrypts the DEK with his private key and proceeds to decrypt the content for displaying to the client.

대표청구항 ▼

[ We claim:] [1.] In a distributed information system, apparatus for limiting access to an owner's digital content, comprising;a) means for storing the owner's content in a document within a digital container and encrypting the document in a Document Encryption Key (DEK);b) a secure server coupled t

[ We claim:] [1.] In a distributed information system, apparatus for limiting access to an owner's digital content, comprising;a) means for storing the owner's content in a document within a digital container and encrypting the document in a Document Encryption Key (DEK);b) a secure server coupled to the system and having access to the stored container for encrypting the DEK and transferring the encrypted document in the digital container to a client on request;c) a client station coupled to the secure server through the system for receiving the digital container and generating transaction data for acquiring the encrypted document in response to the client;d) a Trusted Information Handler (TIH) coupled to the client station;e) TIH means for receiving the transaction data and returning to the client station a digital signature, signing algorithm, a TIH authenticating certificate and a TIH public key for return to the client means and transfer in the digital container to the server means together with the encrypted DEK and a client public key;f) server means for decrypting the DEK; re-encrypting the DEK in the client public key and the TIH public key and transferring the double encrypted DEK to the client station; andg) means for transferring the TIH encrypted DEK to the TIH for decryption and return of the decrypted document to the client station.